Abstract:In spite of unique advantages like higher recognition accuracy and better generalization capability, Automatic Modulation Classification (AMC) oriented Deep Neural Networks (ADNNs) are still vulnerable to adversarial examples (AEs). Recent results revealed that an attacker can easily fool ADNNs through adding a small and imperceptible perturbation to the original signal. Among different AE generation methods, Universal Adversarial Perturbation (UAP) has unique characteristics including input-agnostic and shift-invariance. However, applying UAP directly to RF signals faces three main challenges, i.e., perturbation neutralization, high perceptibility, and dependency of original signals. In this backdrop, a novel Universal Adversarial Perturbation under Frequency and Data constraints (UAP-FD) attack is put forward for solving these problems in this paper. First, an individual perturbation is filtered based on the representation visualization algorithm to counter the neutralization problem in perturbation integration. Second, the high-frequency components in the integrated UAP is eliminated through signal decomposition and reconstruction for promoting the imperceptibility. Third, a proxy signal generation method is proposed to help UAP-FD adapt to data-free black-box settings. A series of experiments is conducted to evaluate the aggressiveness and imperceptibility of UAP-FD attack in different settings on a public dataset. Results show that, compared with existing proposal, UAP-FD has a 40% higher fooling rate, and it can reduce the accuracy of the ADNN model from 83% to 9%, while maintaining a good imperceptibility and shift-invariance property. In addition, UAP-FD is applied to real world captured signals over the transmission channel; and it can reduce the model accuracy from 98.3% to 12.5%.

Crafting Targeted Universal Adversarial Perturbations: Considering Images as Noise

Double Targeted Universal Adversarial Perturbations

Simple iterative method for generating targeted universal adversarial perturbations

Improving Transferability of Universal Adversarial Perturbation with Feature Disruption.

Comparative Evaluation of Recent Universal Adversarial Perturbations in Image Classification

Robust Universal Adversarial Perturbations

Universal Adversarial Perturbation Generated by Attacking Layer-wise Relevance Propagation

Procedural Noise Adversarial Examples for Black-Box Attacks on Deep Convolutional Networks

Universal Adversarial Perturbation Via Prior Driven Uncertainty Approximation

Joint Universal Adversarial Perturbations with Interpretations

Learning Universal Adversarial Perturbation by Adversarial Example

Exploring aesthetic procedural noise for crafting model-agnostic universal adversarial perturbations

Enhanced covertness class discriminative universal adversarial perturbations

Decision-based Universal Adversarial Attack

Real-time Detection of Practical Universal Adversarial Perturbations

Fast-UAP: An Algorithm for Speeding up Universal Adversarial Perturbation Generation with Orientation of Perturbation Vectors

Black-Box Universal Adversarial Attack for DNN-Based Models of SAR Automatic Target Recognition

Universal Attack against Automatic Modulation Classification DNNs Under Frequency and Data Constraints

Universal Perturbation Attack Against Image Retrieval

A Universal Defense Strategy Against Adversarial Attacks Based on Attention-Guided

An Universal Perturbation Generator for Black-Box Attacks Against Object Detectors.